Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e0Ew7yjEsMhOMqlYQ9EcJVE9nFU.roa
File: e0Ew7yjEsMhOMqlYQ9EcJVE9nFU.roa (raw, json)
Hash identifier: xVFCbvCZM+uWmZhbIqmkQstnglpF0/mga7Q0BbvfoRA=
Subject key identifier: 7B:41:30:EF:28:C4:B0:C8:4E:32:A9:58:43:D1:1C:25:51:3D:9C:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3AE121C71923DD7FDA80BC3919880EBC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e0Ew7yjEsMhOMqlYQ9EcJVE9nFU.roa
Signing time: Fri 31 Oct 2025 15:27:03 +0000
ROA not before: Fri 31 Oct 2025 15:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207019
IP address blocks: 151.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e1:21:c7:19:23:dd:7f:da:80:bc:39:19:88:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 31 15:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b4130ef28c4b0c84e32a95843d11c25513d9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:26:3f:3d:c3:8d:98:ff:28:ca:ec:21:16:
1d:bb:e4:da:86:ad:0b:d1:8b:0c:fc:ca:0e:83:54:
c5:bc:ba:bc:a1:74:1d:5c:e6:8e:7d:c1:cb:5b:53:
39:5b:32:19:61:d8:ca:b9:74:ac:9a:8e:9d:0d:2d:
83:a2:f1:e7:8e:3d:1b:92:4a:fa:94:02:ee:93:83:
8d:36:0e:33:b0:31:4e:3f:cd:93:08:ca:bd:05:bd:
05:fa:95:11:4a:98:0e:47:5f:03:17:42:52:f7:a8:
ea:be:e3:0c:f2:08:e4:b6:1b:46:48:31:36:35:ff:
48:15:b2:67:ca:b3:1c:e5:26:ce:a9:e1:8f:2a:36:
bf:7b:b3:59:40:51:18:40:aa:77:53:c1:0b:2e:aa:
88:1c:11:2c:de:ad:d0:a0:e6:6f:7a:7c:38:0f:6a:
22:a8:e9:db:00:0f:fd:cc:cd:9a:33:94:0c:35:5c:
d0:d2:c5:bc:8e:45:61:c0:1d:41:c4:e0:6a:a5:75:
69:82:20:f9:f0:1e:a0:8b:26:9f:85:bd:e9:3f:ff:
af:3f:82:4e:21:f9:e3:d7:f7:cb:ee:fc:59:97:cf:
b6:4f:1c:e9:26:25:d5:4a:4f:35:dc:0c:9e:37:02:
dd:41:15:27:ef:b4:cb:9d:5b:c2:6e:3d:38:10:8f:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:41:30:EF:28:C4:B0:C8:4E:32:A9:58:43:D1:1C:25:51:3D:9C:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e0Ew7yjEsMhOMqlYQ9EcJVE9nFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a0:29:4b:52:f2:5e:ec:53:3a:6d:c2:d2:50:73:ab:c3:4a:
2c:04:85:cc:18:6c:c3:bb:5e:91:1b:c0:8a:5a:0d:16:2d:7d:
48:7a:0d:5b:92:12:3e:6c:39:5e:12:01:cb:12:df:b9:e3:51:
8b:47:b6:1a:ad:c4:63:88:63:f9:8c:03:f5:c3:b8:46:0b:08:
6d:aa:48:b0:8d:ea:cc:ec:b7:32:d8:30:7b:c6:a1:83:65:81:
91:ea:e6:70:72:d7:de:9b:11:70:84:f2:c1:cc:f6:c8:92:ae:
35:18:f7:cb:44:7a:68:24:7c:e4:b3:45:af:e3:e2:07:74:99:
47:c9:34:40:4c:f7:1c:dc:6a:d0:bd:0c:a6:4f:92:9d:e8:08:
29:56:31:b6:b3:0e:37:10:9e:22:77:13:cb:97:02:1a:0f:83:
e5:9b:42:77:ea:e1:fb:7d:29:ef:12:01:23:22:6e:94:0d:06:
76:ee:93:ea:c7:ad:cf:26:3e:25:98:65:c2:cf:97:ad:43:f2:
4e:41:6d:f4:68:b0:9a:06:45:0e:88:7e:d8:f1:56:dd:9e:f6:
ad:3b:f4:6f:8d:c5:10:43:b7:1b:81:98:6c:6d:79:22:62:92:
6e:ad:01:ba:74:42:8c:32:4b:23:5a:41:b8:15:a3:50:ee:93:
e1:fc:bd:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo64SHHGSPdf9qAvDkZiA68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDMxMTUyNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQxMzBlZjI4YzRiMGM4NGUzMmE5NTg0M2QxMWMyNTUxM2Q5YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuwmPz3DjZj/KMrsIRYdu+Tahq0L
0YsM/MoOg1TFvLq8oXQdXOaOfcHLW1M5WzIZYdjKuXSsmo6dDS2DovHnjj0bkkr6
lALuk4ONNg4zsDFOP82TCMq9Bb0F+pURSpgOR18DF0JS96jqvuMM8gjkthtGSDE2
Nf9IFbJnyrMc5SbOqeGPKja/e7NZQFEYQKp3U8ELLqqIHBEs3q3QoOZvenw4D2oi
qOnbAA/9zM2aM5QMNVzQ0sW8jkVhwB1BxOBqpXVpgiD58B6giyafhb3pP/+vP4JO
Ifnj1/fL7vxZl8+2TxzpJiXVSk813AyeNwLdQRUn77TLnVvCbj04EI98lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtBMO8oxLDITjKpWEPRHCVRPZxVMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZTBFdzd5akVzTWhPTXFsWVE5RWNKVkU5bkZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QYMA0G
CSqGSIb3DQEBCwUAA4IBAQBWoClLUvJe7FM6bcLSUHOrw0osBIXMGGzDu16RG8CK
Wg0WLX1Ieg1bkhI+bDleEgHLEt+541GLR7YarcRjiGP5jAP1w7hGCwhtqkiwjerM
7Lcy2DB7xqGDZYGR6uZwctfemxFwhPLBzPbIkq41GPfLRHpoJHzks0Wv4+IHdJlH
yTRATPcc3GrQvQymT5Kd6AgpVjG2sw43EJ4idxPLlwIaD4Plm0J36uH7fSnvEgEj
Im6UDQZ27pPqx63PJj4lmGXCz5etQ/JOQW30aLCaBkUOiH7Y8VbdnvatO/RvjcUQ
Q7cbgZhsbXkiYpJurQG6dEKMMksjWkG4FaNQ7pPh/L33
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:11 2025 by rpki-client